Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.mft
File: jKD-wY7yn5qt_pYrz3QIkNsPc5A.mft (raw, json)
Hash identifier: OZ7mlitmbJ0qW6rb7TEEnFJM16vphxYGfQrbfb5TUPw=
Subject key identifier: B1:62:89:05:AF:E3:D4:DE:99:26:13:36:67:8F:28:AB:C1:B2:BE:6A
Authority key identifier: 8C:A0:FE:C1:8E:F2:9F:9A:AD:FE:96:2B:CF:74:08:90:DB:0F:73:90
Certificate issuer: /CN=8ca0fec18ef29f9aadfe962bcf740890db0f7390
Certificate serial: 0199FD3401264BF72C07D0CB50A77BD810ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jKD-wY7yn5qt_pYrz3QIkNsPc5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.mft
Manifest number: 0ECC
Signing time: Sun 19 Oct 2025 16:01:07 +0000
Manifest this update: Sun 19 Oct 2025 16:01:07 +0000
Manifest next update: Mon 20 Oct 2025 16:01:07 +0000
Files and hashes: 1: jKD-wY7yn5qt_pYrz3QIkNsPc5A.crl (hash: z9oA+qk4EpeEeGWdqPvE3lFzPpFSb/hUH0Rh410aY3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/jKD-wY7yn5qt_pYrz3QIkNsPc5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:01:26:4b:f7:2c:07:d0:cb:50:a7:7b:d8:10:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ca0fec18ef29f9aadfe962bcf740890db0f7390
Validity
Not Before: Oct 19 16:01:07 2025 GMT
Not After : Oct 20 16:01:07 2025 GMT
Subject: CN=b1628905afe3d4de99261336678f28abc1b2be6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d1:c5:dc:ec:22:2b:86:dc:39:d1:a5:83:9e:
b4:78:c9:4d:5e:0a:19:8c:53:d6:ec:43:73:9d:87:
ea:0d:e4:8e:14:0c:24:94:66:65:7a:cf:30:a6:c6:
93:81:fe:dd:d8:58:87:55:00:7e:17:9e:7f:58:57:
10:ac:3c:c0:bb:2a:6a:da:ed:90:fa:b0:5a:ba:09:
43:0b:70:b5:f6:dc:a2:ea:5e:7c:3e:f4:0b:33:b7:
58:f3:79:f0:80:e6:fb:8f:83:63:95:73:d7:27:c9:
5d:25:7a:4c:91:7b:07:c1:cb:ec:b9:1d:55:61:cf:
b7:8b:ab:ed:c7:fc:fd:0f:24:79:5b:99:16:26:06:
22:dc:18:7e:d8:49:a9:e5:52:3a:68:7c:18:ae:43:
a1:02:cd:9a:ee:94:9d:54:e0:55:0b:7c:31:98:82:
7d:2d:ec:34:d4:c5:1e:7d:91:df:34:c1:82:71:26:
38:e3:98:cb:15:04:23:3f:80:3d:e2:f5:b7:23:94:
ae:29:5c:7e:e9:7b:18:0c:40:e7:45:a2:ba:c2:fd:
21:cc:c6:2d:d5:9a:b7:69:c8:40:a8:ea:c0:52:67:
c8:c2:91:eb:a1:fe:fd:82:5d:d3:e4:c3:25:a1:64:
66:bc:9e:6c:f3:bc:4a:86:43:5a:a4:ec:f3:fd:73:
25:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:62:89:05:AF:E3:D4:DE:99:26:13:36:67:8F:28:AB:C1:B2:BE:6A
X509v3 Authority Key Identifier:
keyid:8C:A0:FE:C1:8E:F2:9F:9A:AD:FE:96:2B:CF:74:08:90:DB:0F:73:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jKD-wY7yn5qt_pYrz3QIkNsPc5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/ea5b40-2886-4baf-8ea0-113eefa51aa6/1/jKD-wY7yn5qt_pYrz3QIkNsPc5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:e3:4c:da:c1:00:8a:db:b5:cb:78:a5:99:9c:e5:53:7d:65:
9b:a0:4d:46:91:08:56:8c:c2:24:af:0d:a4:f0:e3:75:27:3d:
08:92:98:b8:d8:a0:7d:cc:9a:32:d0:e7:72:ba:01:04:a4:65:
dd:78:e2:1b:b3:1c:6b:df:a1:fc:ef:9f:fd:80:4f:a2:d3:08:
e3:64:b3:cd:e7:4b:1a:03:ef:5d:0a:d3:c8:55:56:0c:bd:a2:
61:37:d5:70:40:c7:62:64:dd:17:b6:c6:ad:f9:b1:5a:05:3c:
19:37:ee:67:c1:97:0f:79:24:b2:94:0a:e2:d9:0a:fc:41:bc:
db:ea:67:ae:d9:c9:63:7f:3f:dc:9d:2d:d4:d2:d1:f1:ea:fa:
bb:9d:19:b8:9e:80:0e:5e:6d:3f:98:45:12:88:62:75:12:28:
19:da:17:bc:d8:ac:85:4d:d7:e9:5b:c8:15:d7:cc:ee:db:57:
db:1c:b8:cc:58:69:3d:d9:ba:1c:a5:63:35:33:8d:ec:5f:db:
a1:a3:57:6c:60:9b:4e:d6:21:05:d2:b5:73:72:16:86:39:ce:
a8:6d:fc:0f:44:a8:0a:68:6c:b6:0f:d0:86:2d:c1:4f:d6:bc:
84:d3:25:8a:d9:80:14:db:6a:63:58:9d:2e:53:29:ca:b3:e5:
12:ac:12:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:35 2025 by rpki-client